[link] New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

5 messages · started by Devi Garcia on Dec 07, 2019

[link] New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

From Devi Garcia · Dec 07, 2019

A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections.

The vulnerability, tracked as CVE-2019-14899, resides in the networking stack of various operating systems and can be exploited against both IPv4 and IPv6 TCP streams

View original on FreeLists

[link] New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

From Devi Garcia · Dec 07, 2019

A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections.

The vulnerability, tracked as CVE-2019-14899, resides in the networking stack of various operating systems and can be exploited against both IPv4 and IPv6 TCP streams

View original on FreeLists

Re: [link] New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

From Laura Dwyer · Dec 07, 2019

What does that mean to the average Android user, Devi?

Is there a way we can detect such an attack and is there anything one can do to avoid getting breached?

On Sat, Dec 7, 2019, 14:28 Devi Garcia <asphyxiated.god@gmail.com> wrote:
Quoted reply (9 lines)
A team of cybersecurity researchers has disclosed a new severe
vulnerability affecting most Linux and Unix-like operating systems,
including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections.

The vulnerability, tracked as CVE-2019-14899, resides in the networking stack of various operating systems and can be exploited against both IPv4 and IPv6 TCP streams

View original on FreeLists

Re: [link] New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

From Devi Garcia · Dec 07, 2019

Nothing really if you don’t use a vpn because they hijack the vpn connection.

Quoted reply (13 lines)
On Dec 7, 2019, at 5:20 PM, Laura Dwyer < ljdwyer2@gmail.com > wrote:
What does that mean to the average Android user, Devi?
Is there a way we can detect such an attack and is there anything one can do to avoid getting breached?
On Dec 7, 2019, at 5:20 PM, Laura Dwyer <ljdwyer2@gmail.com> wrote:

What does that mean to the average Android user, Devi?

Is there a way we can detect such an attack and is there anything one can do to avoid getting breached?

On Sat, Dec 7, 2019, 14:28 Devi Garcia <asphyxiated.god@gmail.com> wrote:
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections.

The vulnerability, tracked as CVE-2019-14899, resides in the networking stack of various operating systems and can be exploited against both IPv4 and IPv6 TCP streams


View original on FreeLists

Re: [link] New Linux Bug Lets Attackers Hijack Encrypted VPN Connections

From Laura Dwyer · Dec 07, 2019

Thank you!

On Sat, Dec 7, 2019, 19:04 Devi Garcia <asphyxiated.god@gmail.com> wrote:
Quoted reply (14 lines)
Nothing really if you don’t use a vpn because they hijack the vpn connection.
On Dec 7, 2019, at 5:20 PM, Laura Dwyer < ljdwyer2@gmail.com > wrote:
What does that mean to the average Android user, Devi?
Nothing really if you don’t use a vpn because they hijack the vpn connection.

On Dec 7, 2019, at 5:20 PM, Laura Dwyer <ljdwyer2@gmail.com> wrote:

What does that mean to the average Android user, Devi?

Is there a way we can detect such an attack and is there anything one can do to avoid getting breached?

On Sat, Dec 7, 2019, 14:28 Devi Garcia <asphyxiated.god@gmail.com> wrote:
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections.

The vulnerability, tracked as CVE-2019-14899, resides in the networking stack of various operating systems and can be exploited against both IPv4 and IPv6 TCP streams


View original on FreeLists


Previous thread · Next thread

Back to December 2019